$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f99f7974-5d0b-3c03-a763-e5d4ef447e23.roa File: f99f7974-5d0b-3c03-a763-e5d4ef447e23.roa (raw, json) Hash identifier: DnUyvUZtjWVhkOZF7R1+Ks5Pg2YYPj1VLpDnN/nbgPk= Subject key identifier: 04:68:65:7F:A6:7B:77:79:A4:2C:E2:7F:98:02:1C:B7:22:47:B7:B2 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D7E48B3F036BFF5C398B8 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f99f7974-5d0b-3c03-a763-e5d4ef447e23.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 40772 IP address blocks: 68.189.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:7e:48:b3:f0:36:bf:f5:c3:98:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=f3367924-5380-492c-850e-1a2c66ab1514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:45:52:0d:12:47:5f:11:cd:ae:fa:dc:3e:d5: 98:39:cf:52:5b:9f:57:c7:fc:99:af:c4:dd:af:4f: 4d:03:eb:b8:02:16:01:11:16:f0:ec:99:e7:78:db: e2:02:28:a6:20:96:59:72:0f:ae:42:0b:a4:95:28: 76:1a:b2:0f:d2:fb:c1:b0:56:c9:01:39:68:30:09: ac:13:22:21:42:50:96:8b:42:bc:6f:6f:db:e4:de: 86:d9:32:c9:dd:92:3d:1f:40:49:cd:3e:89:2e:dd: 9b:1c:c7:e1:a8:10:e4:0d:34:9b:1a:29:b1:51:42: 83:bc:9d:79:d4:24:3b:4b:bb:c8:34:b7:8b:6c:17: e6:28:63:08:23:b4:bf:a7:73:ba:0b:92:0a:17:07: 58:fd:1b:36:c9:5b:bc:3f:b2:56:2f:29:db:8f:a2: da:a9:2a:66:67:6d:39:5c:6a:5c:7e:9c:6b:da:f3: 61:07:b4:0f:3f:47:fd:4e:0d:7e:fb:b8:de:61:ad: 45:7e:58:c4:b1:9b:7c:80:ea:fe:b7:d2:fc:04:cc: 73:1c:ac:6d:3f:4d:0d:8f:30:24:99:7c:9a:44:df: 37:75:19:d5:8f:c8:89:c0:2c:af:1d:d6:09:4f:5d: e5:70:e0:0f:e8:ac:be:d8:92:2a:6b:58:86:1d:19: 2b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:65:7F:A6:7B:77:79:A4:2C:E2:7F:98:02:1C:B7:22:47:B7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f99f7974-5d0b-3c03-a763-e5d4ef447e23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.189.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:f4:ee:65:d4:f4:0c:6c:39:7f:d1:2c:a8:93:52:dd:4f:b6: a8:08:aa:a6:c5:7d:51:3f:7a:2c:f4:bb:19:78:b1:85:12:74: 60:89:6f:91:b1:78:57:ff:4d:7a:7d:de:5c:cb:ab:69:36:25: 8a:3d:c7:0c:b3:47:86:0a:5c:1b:8d:02:4b:a0:1e:05:ae:09: 43:0f:d2:8d:a7:d3:d4:ee:d3:4d:d5:e9:05:67:de:7e:58:bb: f5:09:c9:8d:af:fa:1b:00:d7:2e:65:ef:3a:ba:cf:c2:70:98: fe:0a:03:77:2a:fc:de:8e:f5:fa:2f:ed:81:f7:4c:43:12:89: 12:57:44:27:43:87:cb:35:f7:7c:55:34:b4:e4:01:ef:a4:fd: 12:de:e1:84:5f:9e:ea:29:20:b4:01:c5:72:cb:24:ae:e3:ff: d3:23:49:43:ae:b2:03:6c:00:6c:f0:cb:96:54:1d:ab:1a:2c: 3a:60:0e:37:7e:32:e1:48:bb:2e:ea:9a:14:b6:b3:cf:5a:c3: 5e:b3:1e:bd:71:15:a3:a9:c8:9f:a7:e4:43:e4:f5:7c:85:aa: 26:d5:1f:09:8a:1e:63:82:65:5c:3b:bf:aa:3c:87:41:49:9a: 85:ce:3a:ed:07:22:57:1d:a0:04:d0:7e:ba:19:38:0b:c5:ca: 6c:53:9b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHX5Is/A2v/XDmLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZjMzNjc5MjQtNTM4MC00OTJjLTg1MGUtMWEyYzY2YWIxNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kVSDRJHXxHNrvrcPtWYOc9SW59Xx/yZr8Td r09NA+u4AhYBERbw7JnneNviAiimIJZZcg+uQguklSh2GrIP0vvBsFbJATloMAms EyIhQlCWi0K8b2/b5N6G2TLJ3ZI9H0BJzT6JLt2bHMfhqBDkDTSbGimxUUKDvJ15 1CQ7S7vINLeLbBfmKGMII7S/p3O6C5IKFwdY/Rs2yVu8P7JWLynbj6LaqSpmZ205 XGpcfpxr2vNhB7QPP0f9Tg1++7jeYa1FfljEsZt8gOr+t9L8BMxzHKxtP00NjzAk mXyaRN83dRnVj8iJwCyvHdYJT13lcOAP6Ky+2JIqa1iGHRkr5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARoZX+me3d5pCzif5gCHLciR7eyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjk5Zjc5NzQtNWQwYi0z YzAzLWE3NjMtZTVkNGVmNDQ3ZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARL0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM307mXU9AxsOX/RLKiTUt1PtqgIqqbFfVE/eiz0uxl4sYUSdGCJb5Gx eFf/TXp93lzLq2k2JYo9xwyzR4YKXBuNAkugHgWuCUMP0o2n09Tu003V6QVn3n5Y u/UJyY2v+hsA1y5l7zq6z8JwmP4KA3cq/N6O9fov7YH3TEMSiRJXRCdDh8s193xV NLTkAe+k/RLe4YRfnuopILQBxXLLJK7j/9MjSUOusgNsAGzwy5ZUHasaLDpgDjd+ MuFIuy7qmhS2s89aw16zHr1xFaOpyJ+n5EPk9XyFqibVHwmKHmOCZVw7v6o8h0FJ moXOOu0HIlcdoATQfroZOAvFymxTm30= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:13 2025 by rpki-client